Problem inResponseTo ID

[caligt]

Mismatched InResponseTo ID in SAML Response with Red Hat SP and MyWorkPal IDP

Issue Description

Using library version 2.9.2 with Red Hat as SP and MyWorkPal as IDP, encountering mismatched session IDs in SAML response.

• Initial Authentication Attempt:

  • Session correctly established in Red Hat.
  • Mismatch between ID generated by the application and the IDP's InResponseTo ID.

• Error Encountered:

• Error: InResponseTo Id "ID_714ab1fb-8af5-417a-ad85-2427434eaf6e" in received response does not match Id "id6c24a58da6c546d4ac86eb21a8007e41" of the sent request

Occurs at route: https://localhost:44370/Saml2/Acs.

• Subsequent Flows:
• After initial attempt, as session remains active in Red Hat, subsequent flows work fine.

Query

• Seems like an issue with library maintaining ID consistency.
• Any known configuration or workaround within the library to address this?

Thank you for your assistance.

[AndersAbel]

Can you please capture the Saml AuthnRequest sent and the response received to see if the Ids are correct in the messages?

To capture the Saml messages the easiest is to use the Saml Dev Tools extensions for Google Chrome.